The Web app also allows users to see photos that have been deleted. On the phone app, those photos get blurred out — but on the Web they seem to remain clearly forever.

“Sure, it’s not the most serious privacy breach that has ever occurred, but that’s missing the point,” wrote security expert Graham Cluley in a blog post on the bug. “The fact of the matter is that WhatsApp users chose to keep their profile photos private, and their expectation is that WhatsApp will honor their choices and only allow their photos to be viewable by those who the user has approved.”

WhatsApp has been committed to ensuring security and privacy for its users, recently introducing end-to-end encryption.

The app’s Web client was introduced on Jan. 21. While many were excited to finally be able to read and respond to messages from their PC, it also disappointed other users with its limited compatibility and functions.